diff --git a/config/jp-apps.yml b/config/jp-apps.yml
index bbe77d2..cd0e993 100644
--- a/config/jp-apps.yml
+++ b/config/jp-apps.yml
@@ -5,6 +5,7 @@ modules:
       - distrobox: /usr
   - type: script
     scripts:
+      - install-mkcert.sh
       - install-syncthing.sh
       - setup-kubectl.sh
       - setup-vscode.sh
diff --git a/config/scripts/install-mkcert.sh b/config/scripts/install-mkcert.sh
new file mode 100644
index 0000000..34daaae
--- /dev/null
+++ b/config/scripts/install-mkcert.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
+chmod +x mkcert-v*-linux-amd64
+cp mkcert-v*-linux-amd64 /usr/bin/mkcert